CVE-2021-30482

概要

参考情報

• blog.jetbrains.com · Vendor Advisory
• blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021 · Vendor Advisory

upsource のその他の脆弱性

• CVE-2019-19704高 7.5In JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect user matching algorithm.
• CVE-2019-12157緊急 9.8In JetBrains UpSource versions before 2018.2 build 1293, there is credential disclosure via RPC commands.
• CVE-2019-12156中 5.3Server metadata could be exposed because one of the error messages reflected the whole response back to the client in JetBrains TeamCity ver…
• CVE-2019-14961中 6.1JetBrains Upsource before 2019.1.1412 was not properly escaping HTML tags in a code block comments, leading to XSS.